CVE-2026-74801
HighCVSS 8.2Summary
SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the elevated elevator.exe helper process. Attackers can create a malicious workspace directory with command metacharacters in its path and trigger the Microsoft Defender exclusion flow to execute arbitrary commands with administrator privileges after UAC approval.
Risk Assessment
The risk includes privilege escalation to administrator level, potentially leading to full system and data compromise.
Recommendation
It is recommended to upgrade SiYuan to version 3.7.4 or later and avoid using paths with metacharacters in workspace directories.
Original NVD description (English source)
SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the elevated elevator.exe helper process. Attackers can create a malicious workspace directory with command metacharacters in its path and trigger the Microsoft Defender exclusion flow to execute arbitrary commands with administrator privileges after UAC approval.